CVE-2004-1826

Опубликовано: 16 мар. 2004

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in index.php in Mambo Open Source 4.5 stable 1.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.

Ссылки

http://marc.info/?l=bugtraq&m=107945576020593&w=2
http://secunia.com/advisories/11140
Patch
Vendor Advisory
http://www.osvdb.org/4307
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9891
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15500
http://marc.info/?l=bugtraq&m=107945576020593&w=2
http://secunia.com/advisories/11140
Patch
Vendor Advisory
http://www.osvdb.org/4307
Exploit
Patch
Vendor Advisory
http://www.securityfocus.com/bid/9891
Exploit
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15500

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.0:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_open_source_4.5:1.0.3beta:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00678

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-f2fp-44fh-jxwr

github

больше 3 лет назад